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REMARK >>>> Set System Variables For Current SQLPlus Session <<<< 

SET FEEDBACK 1 

SET NUMWIDTH 10 

SET PAGESIZE 24 

SET LINESIZE 80 

SET TRIMSPOOL ON 

SET TAB OFF 

SET DEFINE » A ' 

SET ECHO ON 

CONNECT SCOTT/TIGER 

CREATE TABLE abc 
(COL1 VARCHAR2 (45) ) ; 

CREATE TABLE j ing 
(COL1 VARCHAR2 (45) ) ; 

GRANT ALL ON abc TO LB AC SYS / 

-- This should not be allowed as the user is SCOTT 

EXECUTE LBAC_SYSDBA. CREATE_POLICY ( 1 simple ' , ' lbac$testl 1 , ' raghu ' ) ; 

CONNECT LBACS YS / LBACS YS 

-- Create policies in database 

EXECUTE LBAC_SYSDBA.CREATE_POLICY( ' simple ' , » lbac$testl ' , » raghu' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( 'complex' , 'lbac$testl' , • rghu ' ) / 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( » sile « , » lbac$testl ' ) ; 

-- Error Conditions 

EXECUTE LBAC_SYSDBA. CREATE_POLICY ( » complex » , ' lbac$testl ' , ' aghu 1 ) ; 
EXECUTE LBACJ3YSDBA. CREATE_POLICY ( ' dummy ' , ' lbac$testl ' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( 'new' , 'lbac$testl' , 'raghu' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY( 'newl23 ' , 1 lbac$ttl ' , ' xyz ' ) ; 

This should not fail ... 
EXECUTE 

LBAC_SYSDBA. CREATE__POLICY ( 1 abcdef ghi j klmnopqrstuvwxyzl2 34 ' , 'lbac$testl' , ' f df ' 
EXECUTE 

LBAC_SYSDBA. CREATE__POLICY ( ■ abcdef ghi j klmnopqrstuvwxyz ■ , » lbac$testl ' , ' f df ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' india ■ , • lbac$testl ' , ' f df ef g ' ) ; 

-- Add 5 policies due to max_label_policies default increase from 5 to 10. 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ■ abl ' , ' lbac$testl ' , ' vcl ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' ab2 ' , ' lbac$testl ' , ' vc2 ' ) ; 
EXECUTE LBAC_SYSDBA.CREATE_POLICY ( ' ab3 ' , ' lbac$testl ' , ' vc3 ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' ab4 ' , ' lbac$testl ' , • vc4 ' ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' ab5 ' , » lbac$testl ' , ■ vc5 ' ) ; 



Error Conditions 
EXECUTE LBAC_SYSDBA . CREATE_POLICY ( 1 abc 1 , 1 lbac$testl ' , 'vex* ) ; 
EXECUTE LBAC_SYSDBA. CREATE_POLICY ( ' simple « ) / 
EXECUTE 

LBAC_SYSDBA.CREATE_POLICY( ' abedef ghi j klmnopqrstuvwxyzl2345 ' , ' lbac$testl ' , » ragu » ) 

/ 

-- Drop extra 5 policies from above. 

EXECUTE LBAC_SYSDBA. DROP_P0LICY ( ' abl ' ) 
EXECUTE LBAC_SYSDBA . DROP_P0LICY ( ' ab2 ' ) 
EXECUTE LBAC_SYSDBA . DROP_POLICY ( 1 ab3 ' ) 
EXECUTE LBAC_SYSDBA . DROP__POLICY ( 1 ab4 » ) 
EXECUTE LBAC_SYSDBA. DROP_POLICY ( 1 ab5 * ) 

-- Let us check the policies created ... 
SELECT * 

FROM DBA_LBAC_POLICIES 
ORDER BY POLICY_NAME; 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( » simple 1 ) ; 

-- The basic objective from now on is to test the enable/disable procedures . . . 

EXECUTE LBAC_LABEL_ADMIN . CREATE_LABEL ( ' simple ' , 1 , 1 A, B ■ , TRUE) ; 
EXECUTE LBAC_LABEL_ADMIN . CREATE_LABEL ( ' abedef ghi j klmnopqrstuvwxyz ' , 2 , 'A' , 
TRUE) ; 

EXECUTE 

LBACJJSER_ADMIN . SET_USER_L ABELS ( 1 abedef ghi j klmnopqrstuvwxyz ■ , ' SCOTT ' , TO_LABEL_LI 
ST . FROM_CHAR ( 1 abedef ghi j klmnopqrstuvwxyz 1 , NULL, 'A' ) ) ; 

SELECT * 

FROM DBA_LBACJJSER_LABELS ORDER BY USER_NAME, POL I C Y_NAME ; 

-- Error Conditions 
EXECUTE 

LBAC_POLICY_ADMIN. APPLY_TABLE_POLICY ( ' abedef ghi j klmnopqrstuvwxyz ' , ' SCOTT ' , ' abc ' ) 

-- OK now 
EXECUTE 

LBAC_POLICY__ADMIN . APPLY_TABLE_POLICY ( ' complex ' , 1 SCOTT ' , ' abc 1 , ■ NO_CONTROL 1 ) ; 
EXECUTE 

LB AC_POL I C Y_ADM I N . APPLY_TABLE__POLICY ( 1 complex 1 , ' SCOTT ' , ■ j ing ' , 1 NO_CONTROL ' ) ; 
EXECUTE 

LBAC_POLICY_ADMIN . APPLY_TABLE_POLICY ( 1 simple 1 , 1 SCOTT 1 , ' abc ' , 1 DELETE_CONTROL ■ ) ; 
EXECUTE 

LB AC_POL I CY_ADM IN . APPLY_TABLE_POLICY ( 1 simple ' , ' SCOTT 1 , 1 EMP 1 , ' DELETE_CONTROL 1 ) ; 
EXECUTE 

LBAC_POLICY_ADMIN.APPLY_TABLE_POLICY( 'sile' , 'SCOTT' , ' jing' , ' DELETE_CONTROL » ) ; 
CONNECT SCOTT/TIGER 
DESC abc; 



INSERT INTO abc (coll) 



VALUES ( ' f df d ' ) ; 
UPDATE abc 

SET raghu = LB AC SYS . TO_LBAC_LABEL ( 1 simple ' , ' A, B 1 ) ; 

-- Should not allow . . . 
DELETE FROM abc; 

SELECT coll, LABEL JTO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

-- Error Condition 

EXECUTE LBAC_SYSDBA.DISABLE_POLICY ( ' simple 1 ) ; 

CONNECT LB AC S YS / LB AC S YS 

EXECUTE LBAC_SYSDBA. DISABLE_POLICY ( 1 simple 1 ) ; 

Error Conditions . . . 
EXECUTE LBAC_SYSDBA.DISABLE_POLICY( 'abcdefghijklmnopqrstuvwxyzfd' ) ; 
EXECUTE LBAC_SYSDBA.DISABLE_POLICY ( ' abcdef ghi j klmnopqrstuvwxyz ' , ■ fdf ' ) ; 

-- Should not delete as the disable will be effective from next session only 
DELETE FROM SCOTT. abc ; 

CONNECT SCOTT/TIGER 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

Should delete now as the policy is disabled ... 
DELETE FROM abc ; 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

INSERT INTO abc (coll) 
VALUES ( ' 123233 ' ) ; 

-- Error Condition ... 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( ' simple 1 ) ; 

CONNECT LBACSYS/LBACSYS 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( ' simple » ) ; 

-- Error Conditions . . . 

EXECUTE LBAC_SYSDBA. ENABLE_POLICY ( » simpler 1 ' ) ; 
EXECUTE LBAC_SYSDBA. ENABLE__POLICY ( ' simple ' , FALSE) ; 

-- Should delete now as the enable will be effective only from new session 
DELETE FROM SCOTT. abc; 



CONNECT SCOTT/TIGER 



-- Expecting no rows . . . 

SELECT coll , LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

INSERT INTO abc(coll) 
VALUES ( ' 1232 1 ) ; 

-- Delete should fail ... 
DELETE FROM abc; 

SELECT coll, LABEL_TO_CHAR (raghu) 
FROM abc 
ORDER BY coll; 

CONNECT LBACS YS / LBACS YS 

EXECUTE LBAC_S YSDBA . DROP 
EXECUTE LBAC_S YSDBA . DROP 
EXECUTE LBAC_SYSDBA . DROP 
EXECUTE LBAC_S YSDBA . DROP 
EXECUTE LBAC_S YSDBA . DROP 
EXECUTE LBAC_S YSDBA . DROP 

Error Conditions 
EXECUTE LBAC_S YSDBA . DROP 
EXECUTE LBAC_S YSDBA . DROP 

SELECT * 

FROM DBA_LBAC_POLICIES 
ORDER BY POLICY_NAME; 

CONNECT SCOTT/TIGER 

-- Simple policy was applied on two tables (abc,emp) the hidden column should 
--be dropped as the TRUE option is set; Policy complex was applied to 
-- two tables (abc, jing) and hidden column should not be dropped as the option 
-- was set to FALSE; Policy sile was applied to a table (jing) and the hidden 
-- column should not be dropped as the default option is FALSE. 

DESC abc; 
DESC jing; 
DESC EMP; 

DROP TABLE abc ; 
DROP TABLE jing; 

SET ECHO OFF 



POLICY ( * simple ' , TRUE) ; 
POLICY ( ' complex ! , FALSE) ; 
POLICY ( 'sile') ; 

POLICY ( 1 abcdef ghi j klmnopqrstuvwxyzl234 1 ) ; 
POLICY ( 1 abcdef ghi j klmnopqrstuvwxyz 1 ) ; 
POLICY ( 'india' ) ; 



POLICY ( 'adfd' ) ; 
POLICY ( 'simple' ,XYZ) ; 



EXIT; 



